Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in watchitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b2a1b7442e643963d1f4aa3fe8696741f7ed248d39effb173f8d77e37690066 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-2939 Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

GHSA-8FC2-FHH6-F6M5 Easy!Appointments Improper Restriction of Excessive Authentication Attempts

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

cassandra-lucene-index 安全漏洞

cassandra-lucene-index is a Lucene-based secondary index for Cassandra open-sourced by NetApp Instaclustr. A security vulnerability exists in cassandra-lucene-index. An authenticated attacker could remotely bypass RBAC and elevate its privileges by exploiting this vulnerability...

CVE-2025-1213

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

aiohttp: XSS on index pages for static file handling

A flaw was found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. When using "web.static..., showindex=True", the resulting index pages do not escape file names. If users can upload files with arbitrary filenames to the static directory, the server is vulnerable to...

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment, scheduling management system from the individual developer Alex Tselegidis. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from a missing permission validation in index.php, resulting in elevated privileges...

PT-2025-6866 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: Prestashop version 8.1.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability due to the lack of proper validation of user input. This affects the link parameter through the /index.php endpoint, specifically in...

PiHome 代码注入漏洞

PiHome is a home automation system from the individual developer of PiHomeHVAC. A code injection vulnerability exists in PiHome version 1.77, which stems from a cross-site scripting vulnerability contained in the PHPSELF parameter of /index.php...

PT-2025-6511 · Glpi · Glpi

Name of the Vulnerable Software and Affected Versions: GLPI versions up to 10.0.17 Description: A vulnerability was found in an unknown functionality of the file /index.php, where the manipulation of the redirect argument leads to open redirect. The attack can be launched remotely. Recommendation...

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

Imagine you're considering a new car for your family. Before making a purchase, you evaluate its safety ratings, fuel efficiency, and reliability. You might even take it for a test drive to ensure it meets your needs. The same approach should be applied to software and hardware products before...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check whether more than chunksize bytes are written. An incorrectly formatted chunk may be decompressed into more than LZNTCHUNKSIZE bytes, and an out-of-bounds index will occur in smaxoff...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ppdev: An error check was added in registerdevice. In registerdevice, the return value of idasimpleget is unchecked. In this case, idasimpleget will use an invalid index value. To address this issue, the index should be checked...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The issue of protecting the fetch of -fdfd in dodup2 from mispredictions has been addressed. Both callers have ensured that fd is not greater than -maxfds; however, misprediction may still lead to the speculative execution of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: Media: dvb-frontends/rtl2832 – Fixed an out-of-bounds write error. Ensured that the index in rtl2832pidfilter does not exceed 31 to prevent out-of-bounds access. dev-filters is a 32-bit value; therefore, the setbit an...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed an issue where an index out of bounds could occur in the degamma hardware format translation. This issue was addressed by fixing the index out of bounds situation in the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: actapi: fixed a possible infinite loop in tcfidrcheckalloc The syzbot detected tasks that were stuck while waiting for rtnllock 1 A reproducer is available in the syzbot bug report. When a request is made to add...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Ensure that the index calculations will never cause an overflow. WHY & HOW Ensure that the calculations of vmid0p72idx, vnom0p8idx, and vmax0p9idx will never cause an overflow or exceed the array size. This fi...